
$ rpki-client -vvf rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
File: B9306D640F988742BB1CB2B19AB9D729636922A3.mft (raw, json)
Hash identifier: tzf8U8ESA3DzUEQhQZAgtMM9lIMmgSLXjBZ/gOxZzKY=
Subject key identifier: E8:69:BC:D9:B3:A7:3C:B7:75:57:2A:7F:F2:42:EF:B3:25:76:70:BB
Authority key identifier: B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3
Certificate issuer: /CN=B9306D640F988742BB1CB2B19AB9D729636922A3
Certificate serial: 3AC308A05BF7420E69155244BA71E66EA411988C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 05:30:37 +0000
Manifest this update: Sat 13 Jun 2026 05:25:37 +0000
Manifest next update: Sun 14 Jun 2026 07:41:37 +0000
Files and hashes: 1: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: axp2eq8WjJ3oyW6DrRyrSevP2DkGuYbEvHXLlB0V2P0=)
2: B9306D640F988742BB1CB2B19AB9D729636922A3.crl (hash: XDjUhWMYjxmpzVo01v9bK1fP9PtjKGxnp2E8LAyvVoA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl
rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:41:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c3:08:a0:5b:f7:42:0e:69:15:52:44:ba:71:e6:6e:a4:11:98:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9306D640F988742BB1CB2B19AB9D729636922A3
Validity
Not Before: Jun 13 05:25:37 2026 GMT
Not After : Jun 14 07:41:37 2026 GMT
Subject: CN=E869BCD9B3A73CB775572A7FF242EFB3257670BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e0:1b:16:e5:07:89:fe:53:dc:41:87:b9:e1:
d5:f5:39:87:67:33:41:7f:f6:bb:1a:ed:f9:b9:74:
8f:fa:0d:cc:28:5a:4c:8b:1a:e0:21:df:40:7d:bc:
2a:a5:19:04:56:c5:d1:c6:92:b3:b5:09:e9:62:9e:
ec:ed:aa:3f:91:69:6e:c2:f8:0f:ae:7a:14:3e:e3:
8c:11:7a:af:f8:bb:26:81:69:6a:78:f6:b2:c9:eb:
0b:b6:d0:7d:69:e7:02:c9:a4:a4:58:4c:d4:9b:37:
b3:ae:7f:ac:20:84:28:c9:36:68:67:47:cc:b6:2a:
22:c2:06:fd:65:31:b0:72:d2:fa:ee:3c:12:91:a5:
97:fa:14:56:ae:2c:fd:2d:f3:bf:93:78:c1:63:11:
f8:f4:31:17:23:94:df:4b:4e:9f:35:f1:06:9c:1d:
7f:9b:2c:4b:75:de:5f:78:83:06:b9:60:a1:a1:57:
d0:26:dd:08:e5:36:8e:b1:8d:98:5e:c9:e4:f3:38:
22:56:22:88:69:75:d4:a5:23:b9:57:d0:40:10:87:
7d:2b:0f:4c:57:5b:78:b5:17:c2:37:17:07:3c:4d:
69:59:c2:79:7f:9d:3c:8c:df:0e:9c:d8:55:c2:04:
27:e6:d9:59:fc:bf:ff:36:1d:7f:0d:70:0a:b0:9e:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:69:BC:D9:B3:A7:3C:B7:75:57:2A:7F:F2:42:EF:B3:25:76:70:BB
X509v3 Authority Key Identifier:
keyid:B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:78:f5:ef:8d:04:ba:65:45:41:68:91:2f:72:f9:36:f6:6a:
7e:fd:44:4c:19:b1:68:2a:3a:de:03:22:c8:cb:60:8e:9c:07:
2d:54:7c:8a:9e:d9:a1:7e:37:87:99:c9:d4:67:e2:57:3a:fd:
cd:8e:6f:94:2d:3e:d1:9d:15:99:5a:f1:ed:ce:45:4e:11:e7:
3b:b3:dd:dd:95:e0:14:d7:d1:5c:85:7a:f8:7e:d7:07:11:10:
d5:1f:5e:14:21:50:23:3e:79:2f:de:d0:ff:6a:ab:7e:7b:10:
a3:52:76:26:6c:de:ac:5d:6c:08:73:db:28:df:ca:e8:e6:d9:
ad:a5:24:cd:60:39:d7:6c:33:6b:7f:53:92:58:28:a0:73:be:
5c:8a:b7:29:f9:c3:32:76:6a:0a:a2:29:42:75:92:b9:8a:9c:
eb:7f:80:6b:5e:d5:67:2d:59:1a:cb:da:10:40:e9:c3:5b:06:
9d:41:1b:82:02:f9:9f:1d:b5:8b:c3:8a:01:11:7a:74:ae:52:
5d:a7:f0:16:5b:13:b7:bc:7a:d8:22:40:93:91:fb:d5:f4:99:
b1:17:58:6a:05:d2:7e:14:38:f8:f3:98:62:1e:a0:a2:47:33:
d2:34:8b:16:64:a2:c0:0f:48:3d:f4:56:9a:f7:66:29:28:f1:
84:79:03:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:42:03 2026 by rpki-client